Privacy Policy

Last updated: August 20, 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Leon Wehrs
Nature.Through.Lens
Carl-Goerdeler-Straße 21
28327 Bremen
Germany

Email: [info@naturethroughlens.de – to be added]
Phone: +49 1525 3159881

2. General Information

We take the protection of your personal data seriously. We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data means any information relating to an identified or identifiable natural person.

This Privacy Policy explains what personal data we collect when you visit our website, why we process it, the legal basis for processing, how long we retain it, and what rights you have regarding your personal data.

The information provided in this Privacy Policy is intended to meet the information requirements under Articles 12, 13 and 14 GDPR.

3. Hosting by Squarespace

This website is hosted and operated using Squarespace.

When you visit our website, Squarespace may process information relating to your visit, including information about your browser, network, device, the pages you visit and your IP address. This processing is necessary to provide, secure and operate the website.

Squarespace acts as a service provider for the operation of our website. Squarespace states that its services are subject to its Data Processing Addendum (DPA) and provides information regarding its privacy and GDPR practices.

The legal basis for processing necessary data for the operation and security of the website is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of our website.

4. Server and Access Data

When you visit our website, technical information may be processed in order to deliver the website and maintain its security and functionality.

This may include, in particular:

  • IP address

  • browser type and version

  • operating system

  • device information

  • date and time of access

  • pages and content accessed

  • technical information required to deliver the website

This information may be processed by Squarespace as our hosting provider.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, functional and technically reliable website.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information stored on your device. Some cookies are technically necessary for the operation of the website, while others are used for analytics and performance measurement.

Squarespace distinguishes between necessary cookies and non-essential analytics and performance cookies. Necessary cookies may be used to provide core website functions, while analytics and performance cookies are used to understand how visitors interact with the website.

Necessary Cookies

Necessary cookies are used to provide essential functions of the website. These cookies cannot generally be disabled through the cookie banner because they are required for the website to function properly.

The legal basis for the use of technically necessary cookies is Section 25(2) TTDSG where applicable, together with Article 6(1)(f) GDPR where personal data are processed.

Analytics and Performance Cookies

We use Squarespace Analytics to understand how visitors use our website and to improve our website and its content.

Depending on your consent settings, analytics and performance cookies may collect information such as:

  • information about your browser, network and device

  • IP address

  • pages visited

  • clicks and interactions

  • timestamps

  • traffic sources

  • session and visitor information

Squarespace states that its analytics cookies are used to generate information such as traffic sources and visitor statistics.

These non-essential cookies are used only where permitted by your cookie preferences.

Where consent is required, the legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG.

You may withdraw or change your cookie preferences at any time through the cookie settings provided on our website.

Please note that refusing analytics cookies may affect the accuracy and completeness of our Squarespace Analytics data.

6. Cookie Consent Banner

We use the cookie consent functionality provided by Squarespace.

Our cookie banner allows visitors to accept all cookies, manage their cookie preferences and decline non-essential cookies.

Non-essential cookies can be restricted through the Squarespace cookie settings. Squarespace recommends restricting non-essential cookies where applicable consent requirements apply.

Your cookie preferences may be stored so that the website can remember your choice.

7. Contact Form

Our website provides a contact form through which you can contact us.

Depending on the information requested by the form, we may process:

  • your name

  • your email address

  • the content of your message

The information you provide is processed for the purpose of receiving, handling and responding to your enquiry.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. In other cases, processing may be based on Article 6(1)(f) GDPR, where we have a legitimate interest in responding to enquiries addressed to us.

Squarespace provides several possible storage options for form submissions, including an email address and its built-in contact management functionality. The exact storage method depends on the configuration of the individual form.

We do not use the contact form for newsletter subscriptions or advertising purposes merely because you submit a contact request.

8. Contact by Email or Telephone

If you contact us by email or telephone, we process the personal data you provide in connection with your enquiry.

This may include:

  • your name

  • email address

  • telephone number

  • the content of your enquiry

  • any other information you voluntarily provide

We process this information solely for the purpose of handling your enquiry and communicating with you.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual measures. Otherwise, the legal basis may be Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

9. Instagram Links

Our website contains links and buttons leading to our Instagram profile.

These are currently ordinary external links. We do not currently embed an Instagram feed or Instagram posts directly into the website.

When you click an Instagram link, you leave our website and access Instagram. Instagram/Meta may then process personal data in accordance with its own privacy policy.

We have no control over the data processing carried out by Instagram after you leave our website.

10. Online Shop

Our website contains an online shop for our photographic products.

At the current stage, the shop checkout and payment processing are not yet activated.

Therefore, no payment data are currently collected through an online checkout on our website.

Once the checkout and payment functions are activated, this Privacy Policy will be updated to describe the relevant payment providers, order processing, shipping services and associated data processing.

11. Newsletter

We currently do not operate a newsletter or use the website to collect newsletter subscriptions.

If a newsletter is introduced in the future, the Privacy Policy will be updated before the newsletter service is activated.

12. Third-Party Services

We currently do not intentionally integrate the following third-party services into the website:

  • Google Analytics

  • Google Maps

  • YouTube

  • Google Fonts

  • embedded Instagram content

  • newsletter services

  • payment providers

The website is operated using Squarespace and uses Squarespace's own analytics functionality.

If additional third-party services are integrated in the future, this Privacy Policy will be updated accordingly.

13. Data Retention

We retain personal data only for as long as necessary to fulfil the relevant purpose or where we are legally required or permitted to retain the data.

The specific retention period depends on the nature of the data and the purpose for which it was collected.

Where statutory retention obligations apply, the relevant statutory retention periods will be observed.

Once the applicable retention period has expired, the relevant data will be deleted unless further processing is legally permitted or required.

14. Recipients of Personal Data

Personal data may be processed by service providers involved in operating our website.

The primary service provider currently used for the website is Squarespace.

Additional recipients may include service providers where this is necessary to operate the website or respond to enquiries.

We do not sell personal data to third parties.

15. International Data Transfers

Because we use Squarespace as our website hosting and service provider, personal data may be processed or transferred outside the European Economic Area (EEA), depending on the services and infrastructure used by Squarespace.

Where personal data are transferred to third countries, the applicable requirements of the GDPR concerning international data transfers will be observed.

Further information regarding Squarespace's privacy practices and data processing arrangements can be found in Squarespace's Privacy Policy and Data Processing Addendum.

16. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

  • Right of access under Article 15 GDPR

  • Right to rectification under Article 16 GDPR

  • Right to erasure under Article 17 GDPR

  • Right to restriction of processing under Article 18 GDPR

  • Right to data portability under Article 20 GDPR

  • Right to object under Article 21 GDPR

  • Right to withdraw consent where processing is based on consent

If you have given consent to the processing of your personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority. These rights are set out in Articles 15–22 GDPR.

17. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for our place of residence/business is:

The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen (LfDI Bremen)

Georgstraße 122–124
27570 Bremerhaven
Germany

Email: office@datenschutz.bremen.de
Phone: +49 421 361-2010 or +49 471 596-2010

The authority confirms these current contact details on its official website.

18. Automated Decision-Making and Profiling

We do not currently use personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

19. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy where necessary, for example when our website, services, technical systems or legal requirements change.

The current version of the Privacy Policy will always be available on this website.

Last updated: August 20, 2026